Re: "Run As" ? Can the default be swapped

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 10/03/03 

Date: Thu, 2 Oct 2003 23:31:30 -0700

"Hochy" <hochy@noratek.com> wrote in message
news:1ae601c38924$c177d5b0$a001280a@phx.gbl...
> Hi,
>
> I have a pc that the user is the admin locally, but when
> swapped to the domain they cannot install apps or office
> add-ins at all. They are set as the admin and "full
> control" has be granted to virtually everything but still
> cannot do anything unless the Run As is implemented. This
> is very annoying as there is an Outlook add-in they
> require that will not load.
> When you choose Run As, pick the same user and domain
> with the same password it works (all fine as local
> login), but not when just clicking to open it.
>
> It seems to be an ownership/security thing, but it worked
> prior to the re-install.
>
> Any ideas? Suggestions - other than Linux?
>
> H

Let me try to pull out of your post the events,
just to be clear I am hearing you correctly.

The machine is a domain member through all of this.
Log on with a non-domain account that is an admin
and applications of choice work fine.
Log on with a domain account that is a member of the
local Administrators group and the applications of
choice do not work.
But, while logged on (with whatever account does not
matter) use RunAs to launch those same applications
as that same domain account that is a member of the local
Administrators group and the applications work.

Is this what you are seeing ?
If so, does use of RunAs behave any differently when
one uses the /profile switch in the RunAs command ? 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA

Relevant Pages

  • Re: Problem getting w2kPro to become part of domain
    ... > machine that is member of Workgroup and a WinXp machine that is member of ... > using a domain account. ... But on the W2kPro I have same user name as a local ...
    (microsoft.public.windows.server.networking)
  • Re: Problem getting w2kPro to become part of domain
    ... I got a W2kPro ... >> machine that is member of Workgroup and a WinXp machine that is member of ... >> using a domain account. ... I get "The credentials supplied conflict with an existing set ...
    (microsoft.public.windows.server.networking)
  • Re: XP Pro user in domain can not run software locally
    ... But now when I login to the domain, ... > needs to install some component and I don't have enough ... Domain Users group is a member of your local Users ... the same will be needed for the domain account. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Server user account issues after upgrade from 2K to XPPro
    ... is the users domain account a member of the ... sure that the user is a member of this group and all should be good. ... server and when he logs into the network at startup as himself on the ... When he logs into the network at startup on the new computer (XP Pro ...
    (microsoft.public.win2000.active_directory)
  • Re: Users Logging on to Domains
    ... There are some applications that will not run properly unless you are logged on as a member of the domain. ... The OP's problem is that either he or his users think for some reason there is an advantage logging onto a local user account rather than the standard domain account. ... The only local accounts domain member PC's under my control have are, say, where the user takes it home and wants to allow his kids to use it, the user always uses his domain account but local accounts are created for the kids. ... I have several non-domain PC's reporting to and totally under the control of WSUS on my SBS, it's a simple regedit on the PC, no server change required. ...
    (microsoft.public.windows.server.sbs)